At Intruder, your privacy is important to us. This privacy policy describes Intruder's policy and privacy practices in relation to information collected from users of Intruder's services, as described at https://intruder.io/intruder-service. It contains Intruder's policy pertaining to the collection, use of, and disclosure of all personal information. This privacy policy governs your access to Intruder's services and by using our platform you consent to the conditions of this privacy policy.
Information Collection Policy
Upon registering a user account in the Intruder platform, you will be asked to submit some personal information. The personal information that Intruder collects includes your name, email address and telephone number. Further information provided directly to Intruder includes the 'Targets' belonging to the user's organization, which are entered into the platform for scanning. All personal information relating to payment card and banking information is handled by our third-party providers 'Stripe' and 'GoCardless' and is not stored by Intruder. Any personal information provided to Stripe or GoCardless through Intruder will be subject to Stripe's/GoCardless' privacy policies and terms of use which are available on the Stripe and GoCardless websites. Intruder may also collect other information that does not reveal specific individual identity, such as browser or device information, information collected through cookies and other technologies that are used to facilitate the operation of Intruder's platform and for other business purposes. Intruder may also identify and log automatically in our servers, or in third-party log files, IP Addresses whenever you access our site, along with the time of the visit and the page(s) visited. Through normal use of Intruder's service, vulnerability scanning data is collected and reports are generated which contain information related to your organization's systems. All reports generated as part of the service will be stored by Intruder for the sole purpose of making the reports available to you. This information will not be shared with any third-party under any circumstances.
How Intruder Uses Personal Information
Any personal information Intruder collects from you may be used to:
• Deliver Intruder's services to you, including trials of the service
• Contact you to deliver information relating to your use of the service
• Contact you to deliver product announcements or offers on the service
• Monitor and analyze your use of the service
• Administer technical support
• Verify that users have the authorization required to use the service
Transfer of Personal Information
Intruder may use certain trusted third-party companies and individuals to help us improve the service (including, but not limited to, data storage, customer services, marketing, web analytics and payment processing). These third-parties may be situated in countries outside of the EU/EEA and will have access to your personal information only for the purpose of performing these tasks on Intruder's behalf and under obligations equivalent to those in this Privacy Policy. As of the effective date of this privacy policy, Intruder's services are hosted on Google Cloud Platform in the London (UK) region. You can find more information on Google Cloud's data security at https://cloud.google.com/security/.
Information Excluding Personally Identifiable Information
Intruder may disclose, and make public, aggregated, non-private or otherwise non-personal information, such as usage statistics of the Service, without your consent.
Changing or deleting your Information
If you prefer not to receive promotional materials, our email newsletters, or other forms of communication, you may choose to opt-out by unsubscribing from our mailing lists. This can be done by clicking the ‘Unsubscribe' link at the bottom of any marketing email. If you wish to close your account with Intruder and have us remove your personal information from our systems, please click the ‘Close Account' button in the 'My Account' section of Intruder's portal. Intruder will not sell, rent, share or otherwise disclose to third-parties the personally identifiable information collected on the Site.
Data Retention
Intruder will retain your personal information for as long as your account is active or as long as it is needed in order to provide the services to you. Intruder may also retain and use your personal information if its use necessary in complying with Intruder's legal obligations or in enforcing agreements.
Security
Intruder takes security very seriously. Our security practices include technical and organizational measures which endeavor to ensure that the personal information we store is not misused, lost or unlawfully accessed.
Use of cookies
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information. When you access our websites, we may place a number of cookie files in your web browser. In addition to first-party cookies, we may also use third-party cookies, which are created by domains other than the one you are visiting directly - for example, the Google Analytics cookie. We use cookies for the following purposes: to enable certain functions of the service, to provide analytics, to store your preferences, and to enable advertisements to be delivered to you. If you want to restrict or block the cookies that are set by our websites, you can do so through your browser setting. Alternatively, you can visit www.internetcookies.org, which contains comprehensive information on how to do this on a wide variety of browsers and devices. You will also find additional information about cookies and details on how to delete cookies from your device.